[LINK] Fwd: Auto-discard notification

[Jan Whitaker]

At 09:29 AM 4/06/04 +1000, Martin wrote:
>your point is taken that you can't ignore or deny the black hat
>activites and refer to this individual as a white hat. calling them a
>grey hat acknowledges that they are a blend of both characters...

Another aspect is who is the affected party.  I'm doing a talk next week 
about e-health from a consumer's perspective [patient, carer, etc].  The 
concepts I'm going to key off relate to this idea.  When people are 
designing, developing and deploying new systems, they often only give 
attention to the risk management for their organisation, i.e. they are the 
white hats.  Unfortunately, if they do only that assessment, they may be 
black hats to the person affected, intentionally or not.  Perception and 
ill-considered outcomes are valid objections.  Maybe they are grey hats in 
this case.

Jan


JLWhitaker Associates
Melbourne, Victoria, Australia
jwhit at melbpc.org.au  --  http://member.melbpc.org.au/~jwhit/whitentr.htm
_ __________________ _